Account: your email address and a password verifier. Your password is stretched in your browser before it is sent, and we store only a further-stretched value, never the password itself. Store content: the store names, descriptions, prices, photo links, checkout links and optional contact email you enter. Anything you mark as part of a published store is public by design.
Billing: subscriptions are handled by Stripe. We keep the Stripe customer and subscription identifiers, not your card details.
Technical: a session cookie that keeps you signed in, and short-lived rate-limiting counters keyed by network address to prevent abuse.
Storefront pages are ordinary web pages. We do not set tracking cookies, run analytics scripts or load third-party scripts on them. Our hosting provider (Cloudflare) processes standard request data such as IP address and user agent to serve and protect the site. When a shopper clicks a Buy button they leave this site and are subject to the merchant’s payment provider. We never see their payment or shipping details.
If someone submits a “Report this store” form we store the report text, the optional contact email they give, and a one-way hash of their network address (never the address itself) to limit repeated abuse.
When you use “Write with AI”, the product name and notes you typed are sent to the Mongoose AI service to generate the draft. Do not put personal data or secrets in those notes.
To keep shoppers safe, published stores are reviewed automatically and regularly, including by an AI model. The reviewer is shown the store name, tagline, about text, and each product’s title, description, price and the payment site its Buy button uses. It is not shown your email address, account details, or the full checkout links. Text submitted through “Report this store” is never sent to the AI model. We also check, about once a day, that each Buy link still works and still leads to a payment provider. Decisions and their reasons are recorded, and a person can review and reverse them.
To run your account and your storefront, to bill you, to prevent abuse and to review reports. We do not sell your data.
You can delete your account at any time from your account page. Deletion cancels billing and permanently removes your stores, products and sessions. Reports about a deleted store are removed with it.
Questions about this policy: use the contact details on mongooselabs.app.